We are committed to protecting your privacy and handling your personal data responsibly. This policy explains exactly what we collect, why, and how you can control it.
This Privacy Policy explains how The Metavision Multimedia Limited ("we," "our," "us," or "The Metavision") collects, uses, stores, and protects your personal information when you visit our website, use our services, or interact with us.
We are committed to ensuring your privacy is protected and that we handle your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.
The Metavision Multimedia Limited is the data controller responsible for your personal data. We are a UK-based creative agency specialising in AI-powered brand development, content creation, video production, web development, and business consultancy services.
Data Controller Details
We collect personal information you voluntarily provide when you:
This may include:
When you visit our website, we automatically collect certain technical information, including:
We may receive information about you from third parties such as:
We use the personal data we collect for the following purposes:
Service Delivery
Communication
Improvement & Analytics
Legal & Security
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:
Contract Performance
Processing necessary to fulfil our contract with you — for example, delivering services you have commissioned and processing payments.
Legitimate Interests
Processing in our legitimate business interests, such as improving our services, preventing fraud, and marketing to existing clients — provided these interests are not overridden by your rights.
Legal Obligation
Processing required to comply with UK law, including financial record-keeping, tax obligations, and responding to lawful requests from authorities.
Consent
Where you have given clear, specific consent — for example, subscribing to our newsletter or agreeing to receive marketing emails. You may withdraw consent at any time.
We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:
We use trusted third-party providers to help us deliver our services. These include:
All service providers are bound by data processing agreements and may only use your data to provide their specific service.
We may disclose your information if required to do so by law, court order, or in response to valid requests from regulatory or law enforcement authorities.
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach that affects your rights.
We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
| Data Type | Retention Period |
|---|---|
| Client project files & communications | Minimum 12 months after project completion |
| Financial records & invoices | 7 years (legal requirement) |
| Contact form submissions | 2 years |
| Newsletter subscriptions | Until you unsubscribe |
| Website analytics data | 26 months |
| Electronic signatures & agreements | 7 years |
| Strategy call bookings | 12 months |
After the relevant retention period, data is securely deleted or anonymised.
Under UK GDPR, you have the following rights regarding your personal data. To exercise any of these rights, contact us at contact@themetavision.co.uk.
Right of Access
Request a copy of the personal data we hold about you (Subject Access Request).
Right to Rectification
Ask us to correct inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data where there is no legitimate reason to continue processing it.
Right to Restrict Processing
Ask us to pause processing your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format for transfer to another service.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes.
Rights re: Automated Decisions
Not be subject to solely automated decisions that significantly affect you without human review.
Right to Withdraw Consent
Withdraw consent for consent-based processing at any time, without affecting prior processing.
We will respond to valid requests within one calendar month. We may need to verify your identity before fulfilling a request.
Where we use third-party service providers based outside the UK, we ensure appropriate safeguards are in place for any international transfer of personal data, such as:
Our primary infrastructure providers (including Sanity and Netlify) operate under data processing agreements that include appropriate international transfer mechanisms.
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
We encourage you to review this policy periodically. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
If you have any questions, concerns, or wish to exercise your data rights, please contact us:
The Metavision Multimedia Limited
Data Controller — Registered in England & Wales
We aim to respond to all data rights requests within one calendar month.
If you are not satisfied with our handling of your personal data, you have the right to lodge a complaint with the UK's data protection supervisory authority: